5.8
Medium
CVE-2026-4366 A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP…
Description
A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources. As a result, sensitive internal services such as cloud metadata endpoints could be accessed. This issue may lead to information disclosure and enable attackers to map internal network infrastructure.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat build of Keycloak 26.4 26.4 | earliest → < 26.4-17 | 26.4-17 |
| Red Hat build of Keycloak 26.4.12 | Versions not published | |
| Red Hat Build of Keycloak | Versions not published | |
| Red Hat JBoss Enterprise Application Platform 8 | Versions not published | |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Versions not published | |
| Red Hat Single Sign-On 7 | Versions not published |
Other CVEs of Red Hat build of Keycloak 26.4
The 116 CVEs of Red Hat build of Keycloak 26.4 →
CVE-2026-97848
Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization
6.5
Medium
CVE-2026-97367
Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover
6.4
Medium
CVE-2026-96547
Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles
6.5
Medium
CVE-2026-97847
Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authority
7.1
High